crowetic f56fe72af6 fix(qortal-oidc-broker): differentiate rate limits for provision API read vs write operations ...

The previous provisioningLimiter applied the same strict limit (20 req/5min)
to ALL /api/provision/* requests, including read-only GET endpoints that
dashboards call frequently. This caused 'Too many provisioning requests'
errors during normal dashboard usage.

Fix: introduce createProvisionMethodAwareLimiter() which applies:
- Lenient limits (80 req/5min) for GET/read operations
- Strict limits (20 req/5min) for POST/PUT/PATCH/DELETE write operations

This protects write endpoints against abuse while allowing dashboards to
make legitimate read requests without hitting rate limits.

2026-07-13 18:00:55 -07:00

..

src

fix(qortal-oidc-broker): differentiate rate limits for provision API read vs write operations

2026-07-13 18:00:55 -07:00

.env.example

patched incorrect 'expired token' messaging

2026-03-23 16:10:23 -07:00

Dockerfile

first version release

2026-02-04 19:31:46 -08:00

package.json

improved default security by removing hardcoded default name/pass for backend accounts/setup, improved security with rate limits on auth, improved error message redaction. One section left regarding encrypted backup file save to browser, but that's less important.

2026-07-13 15:49:38 -07:00

tsconfig.json

first version release

2026-02-04 19:31:46 -08:00